Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32373a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a32373a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          Vw9E8DxSamHMA6+dh+O7NyLYGPoQPKpnfUCTqYPuO08=
Subject key identifier:   F7:7D:DD:DB:B2:23:48:C2:1D:C6:56:79:AA:D1:A7:39:05:CB:F2:48
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       4AE5955C7211B408445CBCEA4862E8641E703FFD
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32373a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:49 +0000
ROA not before:           Thu 05 Oct 2023 17:46:49 +0000
ROA not after:            Thu 03 Oct 2024 17:51:49 +0000
asID:                     61832
IP address blocks:        2804:1a04:27::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e5:95:5c:72:11:b4:08:44:5c:bc:ea:48:62:e8:64:1e:70:3f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:49 2023 GMT
            Not After : Oct  3 17:51:49 2024 GMT
        Subject: CN=F77DDDDBB22348C21DC65679AAD1A73905CBF248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:11:6b:a8:a4:57:aa:2a:8f:96:f3:76:53:
                    43:a0:1f:be:bb:db:09:ed:33:b9:a8:d4:c0:29:fb:
                    7b:8b:99:50:2e:8a:2c:6e:7b:13:91:a5:63:2b:7c:
                    25:d7:d7:cb:d1:55:bd:6a:49:25:20:e5:82:39:7b:
                    1c:c6:ac:5f:a6:ca:59:85:95:90:bf:67:9a:76:8b:
                    b7:61:75:92:5f:e8:e2:d4:15:da:c2:ae:41:c2:ae:
                    37:05:e2:f9:92:fa:51:bf:80:71:6a:e0:d2:bd:fa:
                    52:a8:db:21:5b:25:06:9d:af:93:bb:fd:01:b9:b1:
                    6f:02:45:d9:55:5b:16:00:e4:a7:2b:90:f6:a6:a3:
                    a2:1e:c9:10:ad:3f:c2:14:a5:1e:8c:1a:a7:6c:26:
                    d4:dd:63:a7:b9:2a:11:f6:28:d3:28:f0:3c:03:9e:
                    e1:60:22:ed:1e:e9:05:20:ed:40:d0:d1:6e:7b:db:
                    0a:14:ca:cd:a4:d3:ea:b6:03:0f:fb:4e:8e:62:69:
                    23:d3:77:21:5c:78:9b:74:89:04:8e:09:d6:03:a3:
                    96:49:b5:7d:f8:53:c7:a3:91:1a:ff:7b:c2:87:9b:
                    09:44:bb:af:96:e3:c6:d6:e4:e2:4c:3c:59:cf:a5:
                    86:4e:9a:ce:c5:2f:df:95:dc:8a:2e:0b:71:4b:92:
                    3b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7D:DD:DB:B2:23:48:C2:1D:C6:56:79:AA:D1:A7:39:05:CB:F2:48
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32373a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:27::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:0c:24:8e:a0:d4:45:6c:65:cc:b5:2d:3a:c6:7a:1c:b3:63:
         b5:5e:96:fc:35:8b:c2:dd:56:d6:28:0d:87:73:8e:ac:f6:ea:
         95:41:96:1a:38:9e:1f:7a:e7:36:8b:cd:b2:aa:ee:76:86:82:
         4b:9d:ab:18:08:23:78:40:4c:1e:7a:5a:15:8d:e2:ef:b8:32:
         f2:3e:a2:24:ae:d2:4a:84:2c:9e:8d:34:67:d3:42:d8:94:1d:
         e5:d2:41:46:9f:b6:ab:66:02:dd:82:78:85:c0:25:5e:35:55:
         68:b6:26:0f:86:37:82:59:f5:d7:ed:f3:bd:1b:b7:5f:80:5a:
         4d:6e:ef:50:fe:51:bc:e1:c0:9b:23:6b:ad:fd:bd:c9:e1:5e:
         7f:22:f9:34:aa:52:fb:92:04:08:5d:5c:d3:a1:9f:6c:5a:86:
         f4:71:89:c3:86:54:64:ef:82:09:95:ac:c4:f8:24:d4:ca:ca:
         83:5c:6d:8a:dc:5d:d7:f5:fd:cb:38:bf:3d:75:db:ed:ec:1b:
         0f:b2:9c:2c:a4:23:6d:17:55:96:a4:e3:03:9c:b6:91:4c:47:
         cd:c1:55:b4:37:0d:0d:19:b2:61:71:29:5e:e1:8d:02:ef:39:
         b0:60:f8:ad:34:53:80:14:62:48:dc:d6:98:66:2d:8a:ca:45:
         85:e4:10:31
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUSuWVXHIRtAhEXLzqSGLoZB5wP/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJBREE1N0Q4NjAxNjM0Mzk0RjREMDlFMkQwNTE3RTMw
MjlGRTk0MDAeFw0yMzEwMDUxNzQ2NDlaFw0yNDEwMDMxNzUxNDlaMDMxMTAvBgNV
BAMTKEY3N0RERERCQjIyMzQ4QzIxREM2NTY3OUFBRDFBNzM5MDVDQkYyNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8RFrqKRXqiqPlvN2U0OgH767
2wntM7mo1MAp+3uLmVAuiixuexORpWMrfCXX18vRVb1qSSUg5YI5exzGrF+mylmF
lZC/Z5p2i7dhdZJf6OLUFdrCrkHCrjcF4vmS+lG/gHFq4NK9+lKo2yFbJQadr5O7
/QG5sW8CRdlVWxYA5KcrkPamo6IeyRCtP8IUpR6MGqdsJtTdY6e5KhH2KNMo8DwD
nuFgIu0e6QUg7UDQ0W572woUys2k0+q2Aw/7To5iaSPTdyFceJt0iQSOCdYDo5ZJ
tX34U8ejkRr/e8KHmwlEu6+W48bW5OJMPFnPpYZOms7FL9+V3IouC3FLkjtRAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU933d27IjSMIdxlZ5qtGnOQXL8kgwHwYDVR0j
BBgwFoAU0q2lfYYBY0OU9NCeLQUX4wKf6UAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm
dXEvMC9EMkFEQTU3RDg2MDE2MzQzOTRGNEQwOUUyRDA1MTdFMzAyOUZFOTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQURBNTdEODYwMTYzNDM5
NEY0RDA5RTJEMDUxN0UzMDI5RkU5NDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NSV3h3cWo5S2tDVWpVclFhNjFjOFpvMURIbUhtcFRrVDluVWZqYWZRZnVxLzAv
MzIzODMwMzQzYTMxNjEzMDM0M2EzMjM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzYzMTM4MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEGgQAJzANBgkqhkiG9w0BAQsFAAOCAQEA
ZwwkjqDURWxlzLUtOsZ6HLNjtV6W/DWLwt1W1igNh3OOrPbqlUGWGjieH3rnNovN
sqrudoaCS52rGAgjeEBMHnpaFY3i77gy8j6iJK7SSoQsno00Z9NC2JQd5dJBRp+2
q2YC3YJ4hcAlXjVVaLYmD4Y3gln11+3zvRu3X4BaTW7vUP5RvOHAmyNrrf29yeFe
fyL5NKpS+5IECF1c06GfbFqG9HGJw4ZUZO+CCZWsxPgk1MrKg1xtitxd1/X9yzi/
PXXb7ewbD7KcLKQjbRdVlqTjA5y2kUxHzcFVtDcNDRmyYXEpXuGNAu85sGD4rTRT
gBRiSNzWmGYtispFheQQMQ==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:23 2025 by rpki-client